Discussions, questions and news about Docker from cybersecurity professionals on Cyberr.
0 members · 24 posts
samuel watua Soita — Full Stack Software Engineer
One malicious package can turn a developer tool into a credential-harvesting machine. That's exactly why software supply-chain security deserves much more attention. Microsoft recently analyzed the LiteLLM 1.107.0 supply-chain compromise, where attackers used stolen developer to…
· 0 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
Your AI model may be secure. Your AI supply chain might not be. Think about everything surrounding a modern AI application. Open-source packages. Models. Plugins. MCP servers. APIs. Vector databases. Cloud services. Third-party tools. Container images. CI/CD pipelines. Every con…
· 3 reactions · 0 comments
Naman Mahna — Software Engineer
☁️ AI DevOps Copilot — Building an AI-Powered, Cloud-Native DevOps Platform What if a DevOps platform could do more than display dashboards—what if it could help engineers investigate failures, understand operational dependencies, and make troubleshooting more intelligent? That…
· 7 reactions · 2 comments
samuel watua Soita — Full Stack Software Engineer
You may have written 99% of your application code—and still be trusting thousands of lines you didn't write. That's the uncomfortable reality of modern software development. A typical application depends on: → npm packages → Python packages → Docker images → GitHub Actions → Clo…
· 1 reactions · 0 comments
Steven Daignault — Consultant
I'd like to experiment with 'paired' persona context engineering in my next position managing an objective or mission such as an InfoSec IAM modernization program. What this means is standing up a side-by-side team of AI personas to perform the same InfoSec program functions the…
· 7 reactions · 4 comments
Schomer — Principal Security Solutions Architect & Founder
The boundaries are collapsing everywhere you look. Check out the breaking intel on the feed right now. We aren't just dealing with basic application bugs anymore—we are looking at structural engineering failures across the board: 🔘 Zero-Click Ad Spyware: Adversaries are deployi…
· 4 reactions · 0 comments
Liam Romanis — Freelance Penetration Tester
container_escape_audit.sh v4.8.2: check 30 expanded from 8 → 26 RBAC probes, closing every gap we identified: * Escalation self-grant: escalate on roles/clusterroles, plus create clusterrolebindings and create rolebindings alongside the existing bind. * Full impersonation set: i…
· 3 reactions · 0 comments
Liam Romanis — Freelance Penetration Tester
container_escape_audit.sh v4.8.1 — now detecting the DepthFirst container escapes. Following DepthFirst's "Containers Are No Longer a Security Boundary" disclosure (Sept 22), the read-only container-escape/LPE auditor now covers both kernel bugs from it: CVE-2026-80521 — an AF_U…
· 4 reactions · 0 comments
Vitalii Bibikov — SOC Analyst, Blue team, Purple team, Incident Response, Inestigation
Done a small EDR evasion research lab, the name of the EDR I will not disclose, since I don't know whether it is a sensitive information or not, anyways, the research was driven by personal curiosity and has self educational intentions. Objective: Learn how an EDR works, underst…
· 3 reactions · 2 comments
Zane Anderson — Security Consultant
IoT Search Engines: The Attack Surface You Can't See. The Bottom Line: If you're not hunting your own infrastructure on Shodan, someone else is. And they're probably doing it faster. IoT search engines have evolved from curiosity to core adversary infrastructure. IABs, ransomwar…
· 2 reactions · 0 comments
Malek ANNABI — Cyber Security Engineer
🚀 Building a Fully Local AI‑Driven Cloud Manager I’m excited to share a project that brings cloud‑like orchestration to a fully local environment, combining virtualization, automation, and AI tools. 🎥 In this video, you’ll see how my Private Cloud Manager interacts with VMware…
· 3 reactions · 5 comments
Liam Romanis — Freelance Penetration Tester
v4.7.4 — containerd CRI-plugin cluster + CrackArmor v4.7.4 closes two container-escape coverage gaps found while reviewing advisories published since the last sweep. The CVE database grows from 32 to 38 entries; the check count stays at 53. containerd CRI-plugin cluster (AWS bul…
· 3 reactions · 0 comments
Liam Romanis — Freelance Penetration Tester
Kubernetes Container Escape Audit v4.7.3: catching a Docker daemon bypass your policy engine can't see Most of what container_escape_audit.sh checks lives inside the container looking out — capabilities, mounts, kernel exposure, runtime binaries reachable through a host path. v4…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
Password managers are usually marketed as user hygiene—a way to stop reusing passwords. For OSINT practitioners, Red Teams, and defenders, they play a much deeper role in persona management, operational security, and post-exploitation analysis. In the current landscape, they are…
· 1 reactions · 0 comments
PhilSIEM 🛡️ A Home-Built Security Information & Event Management System Built by Philip O'Malley as part of a cybersecurity career transition from Jarrow, North East England. What It Does * Collects and parses security logs from multiple sources * Detects brute force attacks, S…
· 5 reactions · 0 comments
Liam Romanis — Freelance Penetration Tester
container_escape_audit.sh v4.7.7 — deeper AppArmor & SELinux coverage Most tooling answers one question about mandatory access control: is AppArmor/SELinux switched on? The problem is that "on" hides a lot. A profile in complain mode logs policy violations but allows them, to an…
· 1 reactions · 0 comments
Liam Romanis — Freelance Penetration Tester
Open-sourced a CORS testing toolkit that tells you whether a misconfiguration is actually exploitable — not just that a header is weak. It checks SameSite, cookie-vs-bearer auth, and whether the endpoint returns anything sensitive, then rates each finding by real impact (base vs…
· 1 reactions · 0 comments
Maudrux Adrian — Directeur Général France | Le futur du recrutement | Cyberr.ai
Bonjour, pour cette nouvelle Newsletter, nous avons décidé de parler sécurité et conformité des Pipelines CI/CD. D'abord, parce que l'ANSSI vient de sortir une étude sur le sujet, ensuite parce que c'est l'un de nos chevaux de bataille depuis deux ans. 1. L'étude de L'ANSSI Le p…
· 4 reactions · 0 comments
Terence KAH — Technicien Informatique
SI jamais vous cherchez : Terence KAH Technicien IT Technicien IT Email : terence.dub@protonmail.com --- Profil professionnel Ingénieur infrastructure avec une double expertise en administration systèmes / réseaux et en cybersécurité (défensive et offensive), complétée par une p…
· 2 reactions · 0 comments
So I built a home SOC lab. Then my phone started receiving live cyber attack alerts. Here's how. A few weeks ago 1 knew nothing about SIEM systems. Today my iPhone is receiving real-time security alerts from my own home lab. Here's what I built and how: The Build Started with Do…
· 3 reactions · 0 comments
Liam Romanis — Freelance Penetration Tester
container_escape_audit v4.7.2 — rolling up the 4.7.x line A bigger update than the version bump suggests. Since 4.6: Container OS support actually fixed, not just claimed — Amazon Linux, SUSE, OpenShift/RHCOS, and Azure Linux nodes were silently falling through to "unknown" beca…
· 1 reactions · 0 comments
Michael Milke — Werkstudent IT-Security
Hey community, I just joined Cyberr and wanted to introduce myself. I'm finishing my Bachelor's in Business Informatics at TH Augsburg, Germany, and I'm looking for my first full-time role in cybersecurity starting April 2026. My path into security wasn't the typical one. Before…
· 3 reactions · 0 comments
Sergey Sinitsyn
Hi everyone, I’m focused on offensive security, especially Web/API pentesting, reverse engineering, security automation, and infrastructure-oriented security labs. My current stack and interests include Burp Suite, Nmap, Kali/Linux, Docker, Ghidra, x64dbg, Python/Go automation,…
· 0 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
📢 Shared from Cyberr Europe Nearly every Linux system built since 2017 vulnerable to ‘Copy Fail’ flaw Security researchers and European cybersecurity officials are urging administrators to address the risk posed by a newly discovered security flaw that has been hiding in the Li…
· 0 reactions · 0 comments